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We investigate macroscopic entanglement of quantum states in quantum computers, where we 
say a quantum state is entangled macroscopically if the state has superposition of macroscopically 
distinct states. The index p of the macroscopic entanglement is calculated as a function of the 
step of the computation, for Grover's quantum search algorithm and Shor's factoring algorithm. It 
is found that whether macroscopically entangled states are used or not depends on the numbers 
and properties of the solutions to the problem to be solved. When the solutions are such that the 
problem becomes hard in the sense that classical algorithms take more than polynomial steps to find 
a solution, macroscopically entangled states are always used in Grover's algorithm and almost always 
used in Shor's algorithm. Since they are representative algorithms for unstructured and structured 
problems, respectively, our results support strongly the conjecture that quantum computers utilize 
macroscopically entangled states when they solve hard problems much faster than any classical 
algorithms. 
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! I. INTRODUCTION 
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. Quantum computers are many-body systems with a large but finite number L of qubits because the efficiency of 

computation becomes relevant only when L is large jll. Although the entanglement is considered to play crucial roles 

in speedup as compared with classical computers SJjJjK there are many types of entanglement and many measures 

^— ' ' or indices of entanglement for many-body systems lalal2llalallflllll,lllUj- 

O 



or indices of entanglement for many-body systems lalal3lalallflllll,lllUj- 

It is therefore interesting to explore 
which type of entanglement is relevant and which measure or index quantifies such entanglement. 

Recently, an index p of macroscopic entanglement, which implies that the state has superposition of macroscopically 
i-G \ distinct states, was proposed and studied in Refs. [Til IT2I Il3|: A pure state, which is homogeneous or effectively 
homogeneous (see Refs. an d Secs. lIVIVIf) . is entangled macroscopically iff it has p = 2. Although the term 

'macroscopic entanglement' are sometimes used in different ways, we follow these references. Most importantly, the 
macroscopic entanglement as defined by this index is directly related to fundamental stabilities of many-body quantum 
states (see Ref. and Sec. [HJ|. Moreover, it was shown rigorously that any pure states with p = 2 in systems of 
rj - * finite L do not approach pure states in the infinite system as L — > oo [Til Il4| . Noting that macroscopically entangled 
IV ' states have such anomalous properties, one of the authors gave the conjecture that a quantum computer should utilize 
. £^ | macroscopically entangled states in some stages of the computation when it performs a quantum algorithm that is 
. much more efficient than any classical algorithms (Ref. [l^ and Sec. 1111(1 . 

In the previous paper £|, we confirmed this conjecture in the case of Shor's factoring algorithm 0,0. Since Shor's 
algorithm is a representative quantum algorithm for solving structured problems ^ is very interesting to study 
whether the conjecture is correct in the case of quantum algorithms for solving unstructured problems. Furthermore, 
in Ref. Q we identified macroscopic entanglement of only two states, the state after the modular exponentiation 
and the final state, among many quantum states appearing in Shor's algorithm, because it was difficult to identify 
macroscopic entanglement of general states. It is also interesting to study whether the other states in Shor's algorithm 
are entangled macroscopically. Recently, an efficient method of calculating the index p was developed and successfully 
applied to many-magnon states ^3] an d to chaotic many-body states [l^. This method, called the variance-covariance 
matrix (VCM) method, enables us to study the macroscopic entanglement of general states. 

In this paper, we study macroscopic entanglement of quantum states of quantum computers performing Grover's 
quantum search algorithm |18| , which is a representative algorithm for solving unstructured problems . The results 
show that the above conjecture is correct also in this case. We also investigate macroscopic entanglement of all quantum 
states appearing in Shor's factoring algorithm, using the VCM method, and the above conjecture is confirmed again. 
These results suggest the relevance of macroscopic entanglement in solving hard problems by quantum computers. 
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The paper is organized as follows. In Sec. [HJ we briefly explain the index p of the macroscopic entanglement. 
Section ITTT1 restates the conjecture in a more detailed form than Refs. and Analytic results for Grover's 

quantum search algorithm are given in Sec. II VI by which the conjecture is confirmed. To see details of evolution of 
entanglement, we present results of numerical simulations of a quantum computer that performs Grover's quantum 
search algorithm in Sec. E] Shor's factoring algorithm is studied in Sec. IVII and the conjecture is again confirmed. 
Discussions and conclusions are given in Sec. IVIII 

II. INDEX OF MACROSCOPIC ENTANGLEMENT 

The index p of macroscopic entanglement was proposed and studies in Refs. ^20,^3- ^ n this section, we briefly 
explain it to establish the notations and for reader's convenience. 

A. Definition 

We consider quantum states which are homogeneous, or effectively homogeneous as in quantum chaotic systems 
[T^| and in quantum computers (see Sees. II VI VII and Ref. Q). For such a state, we consider a family of similar states 
of various sizes, and denote the state of size L by p(L). We say p(L) (or a quantum system) is macroscopic if for 
every quantity of interest the term that is leading order in L gives the dominant contribution UM . We say p(L) is 
entangled macro scopically if the state has 'superposition of macroscopically distinct states' [Tllll2Lll^.l2C| . 

In general, however, the term in the quotation marks is quite ambiguous |!2tll9j . For example, it would be obvious 
that a 'cat state' \ip ca ,t{L)) = (|00 • • • 0) + 111 • • • l))/y/2 of a quantum computer with L qubits has such superposition, 

Ha? 



whereas how about the following state |19j? 

|Vdws(i)) = J_ (|000 ■ • • 0) + |100 ■ • • 0) + |110 • ■ • 0) + • • • + |111 ■ • • 1)) . (1) 
V L + 1 

Recently, a reasonable index p of macroscopic entanglement was proposed for pure states 0, ll^ . For p(L) = 
\i/>(L)){ip(L)\ t this index is defined by H2 

max(^(L)|Ai t Ai|^(i)) =0(L P ), (2) 

A 

where AA = A — (ip(L)\A\tjj(L)) and A is an additive operator, i.e., a sum of local operators [ll|; see, e.g., Eqs. © 
below. 

The index p ranges over 1 < p < 2 (see Appendix 0. According to Refs. 0, 0, a pure state is entangled 
macroscopically if p = 2 |2jj, whereas it may be entangled but not macroscopically if p < 2. For example, the 'W 
state,' |^vv(i)) = (| 100 • • • 0) + |010 • ■ • 0) + • ■ • + |000 ■ • ■ 1)), has p = 1, hence its entanglement is not macroscopic 

[ITIIT^ . This is reasonable because the W state corresponds to a single-magnon state in a ferromagnet, which is quite 
a normal state. Since both the W state and product states have p = 1, they belong to the same class with respect to 
the macroscopic entanglement. On the other hand, we can show that p — 2 for |^dws) of Eq. hence is entangled 
macroscopically. Physically, IV'dws) is superposition of single-domain- wall states which have different positions of the 
domain wall. 

It is worth mentioning that a generalized index q, which can be applied to mixed states as well, and a method for 
detecting macroscopic entanglement were proposed in Ref. |l9j| . However, we do not discuss these points in this paper 
because we treat pure states only. 

B. Efficient method of calculating p 

Evaluation of a measure or index of entanglement often becomes intractable for large L. Fortunately, this is not 
the case for p, i.e., there is an efficient method of calculating p 0,0. 
For qubit systems, an additive operator can be expressed as 



(3) 
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Here, 1(7) and a a (l) (a = x, y, z) denote the identity and the Pauli operators, respectively, acting on the qubit at site 
I, and Qo's and c; Q 's are complex numbers which are independent of L. For convenience, we here allow non-hermitian 
additive operators, as in Refs. Since we are interested in A A, we henceforth drop X)/ c iol(0 from Eq. © 

E3,i.e., 

L 

i = E E cb»*«(0- (4) 

1=1 a=x,y,z 

Without loss of generality, we normalize 

L 

E \«°\ 2 = L. (5) 

/— 1 a— x,y,z 

The max^j in Eq. J2J) i s thus taken over all possible choices of q q 's satisfying this condition. 
Let us define the variance-covariance matrix (VCM) for a pure state \ijj(L)) by 

Vcapv = {ip(L)\Aa a {l)Aa p (l')\^(L)), (6) 

where Aa a (l) = a a (l) — (ip(L)\a a {l)\%(){L)) , a, (3 = x,y,z, and 1,1' — 1,2, ••• , L. It was shown in Ref. 01 that the 
maximum eigenvalue e max (L) of the VCM is related to p of \i/)(L)) as 

e max (^) = C(L P ~ 1 ). (7) 

Hence, we can calculate p by calculating e max (L), which can be done in a Poly(L) time because the VCM is a 3L x 3L 
hermitian matrix. Furthermore, from the eigenvector(s) of the VCM corresponding to e max (L), we can find the 
maximally-fluctuating additive operator (s) A max , which satisfies fl2ll25l| 

max(^(L)|AitAi|^(L)) = (^(i)|Ai| nax Ai max ^(L)) ~ e max (L)L - 0(L P ). (8) 
A 



C. Physical properties of p 

It was shown in Ref. that p is directly related to fundamental stabilities, including decoherence and stability 
against local measurements, of many-body states |22j . Regarding decoherence by weak perturbations from noises or 
environments, it was shown that for any state with p = 1 its decoherence rate T by any of such perturbations never 
exceeds 0{L). For a state with p = 2, on the other hand, it is possible to theoretically construct a noise or environment 
that makes T of the state 0(L 2 ). This does not necessarily mean that such a fatal noise or environment exists in real 
systems: It depends on physical situations |ll|. In this view, a more fundamental stability is the stability against 
local measurements, which was proposed and defined in Ref. [Tl) . From the theorem proved there, we can see that 
a state with p = 2 is not stable against local measurements, i.e., there exists a local observable by measurement of 
which the state changes drastically. Furthermore, it was also proved rigorously that any pure states with p — 2 in 
systems of finite L do not approach pure states in the infinite system as L — > oo |lll Il4| . 

These observations indicate that pure states with p = 2 are quite anomalous many-body states. This led to 
the conjecture of Ref. which will be restated more clearly in Sec lllll If this conjecture is correct, p is one of 
indices that are most directly related to efficiency of quantum computation, among many measures and indices of 
entanglement. This conjecture has been confirmed in Ref. 4] for Shor's factoring algorithm, which is a representative 
algorithm for structured problems, and will be confirmed in this work for Grover's quantum search algorithm, which 
is a representative algorithm for unstructured problems. 

The index p was also studied for many-magnon states in Ref. ^| 1 an d for many-body chaotic states in Ref. ^| . 
Comparison with another measure of entanglement were also made in these references. Most importantly, many states 
were found such that they are almost maximally entangled in another measure but their p is minimum, p — 1 . Many 
other states are also found such that their p is maximum, p = 2, but their entanglement is small in another measure. 
This demonstrates the well-known fact that a simple statement such as 'more efficiency of computation requires more 
entanglement' is meaningless unless the measure or index of the entanglement is specified. In this paper, we focus on 
the macroscopic entanglement as measured by the index p. 
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III. CONJECTURE ON QUANTUM COMPUTATION 



Consider a computational problem, the fastest classical algorithm for which takes Q™ ln (L) steps when the size of 
the input is L bits. We consider quantum computers that solves the same problem. Here, to be definite, we mean 
quantum circuits by 'quantum computers.' There are many different circuits for a single quantum algorithm. We say 
a quantum algorithm A solves this problem much faster than classical algorithms if some quantum circuit of A takes 
only Q(L) steps which is much less than Q™ m (L) in the sense that 

lnrinQ"? in (L)-lnQ(L)l 

— — = > a positive constant, for large L. (9) 

In hi 

Here, in the case of the search problem of Grover, we count each oracle call as one step in defining <2"" n (L) and Q(L). 
Let Cq(L) be the minimum number of qubits of such circuits that satisfy this inequality. Our conjecture is as follows: 
If a quantum computer which has £(L) qubits performs A with Q(L) steps that satisfies inequality JJJJ, and if 

£(L)=£ (L) + O(l), (10) 



where 0(1) denotes a constant that is independent of L, then a macroscopically entangled state(s) of size O(L) or 
more appears in the quantum computer during the computation |2l| . Although it would be hard to determine £o(L) 
of a general algorithm, we assume optimistically in this paper that the simple circuits of Sees. Ivl and IVII for Graver's 
quantum search and Shor's factoring algorithms, respectively, would satisfy Eq. (|10|l . 

In the case of Grover's quantum search algorithm, for example, the left-hand side of inequality © approaches 1 as 
L — > oo (thus the inequality is satisfied) if the number of the solutions M is 0(1). Furthermore, it seems reasonable 
to assume that 



£ (L) > L (11) 

because the index register requires L qubits, and more qubits may be required for the oracle, the conditional phase 
shift, and so on. As we will show in this paper, macroscopically entangled states of size O(L) indeed appear during 
the computation if M — 0(1). 

Note that we are considering quantum computers which have almost the minimum number £{L) of qubits to perform 
A. This is because it is generally possible to mask macroscopic entanglement if one can add arbitrarily many qubits 
to the computer. We exclude such uninteresting possibility by imposing Eq. (|10fl . However, it is worth mentioning 
that one can easily generalize the above conjecture to the case where a quantum error correction p4| is used in the 
computer. That is, although the number of physical qubits does not satisfy Eq. I|10|l in such a case, one can identify 
each logical qubit with a large qubit. Then, Eq. Hl()(l is satisfied for the number of the large qubits, and the conjecture 
can be applied if the macroscopic entanglement is defined in terms of the large qubits. 

Since we only consider pure states in this paper, a macroscopically entangled state is a state with p = 2. Hence, the 
above conjecture may be stated roughly as follows: A quantum algorithm that is much faster than classical algorithms 
utilizes some state(s) with p — 2. Note that this does not claim that all states with p — 2 would be useful to fast 
quantum computation. In particular, the conjecture does not claim that all macroscopically entangled states appearing 
in the computation would be relevant to fast quantum computation. This point will be discussed in Sees. HVDl and 
IVIDI bv showing examples. 

Furthermore, the following fact is worth mentioning. For some macroscopically entangled states of size L, there 
are quantum circuits that convert a product state into such a state in O(L) steps if the target state with p — 2 is 
known when the circuits are designed. This fact has nothing to do with our conjecture. The point is that in quantum 
computation the states that appear at, e.g., the middle point of the computation are unknown when the circuits are 
designed, because the states depend on the solutions of the problems to be solved. The above conjecture claims the 
appearance of macroscopically entangled states in this case. 



IV. ANALYTIC RESULTS FOR GROVER'S QUANTUM SEARCH ALGORITHM 



Consider the problem of finding a solution to the equation f(x) = 1 among N = 2 L possibilities, where f(x) is 
a function, / : {0, 1} L i— > {0, 1}. If the number M of solutions is 0(1), this 'search problem' is hard in the sense 
that classical algorithms take O(N) steps. A quantum computer using Grover's quantum search algorithm solves 
this problem much faster, with O(Vn) steps Q, and inequality © is satisfied. Hence, Grover's algorithm is 
a representative quantum algorithm for unstructured problems jl|. We investigate the index p of quantum states 



5 



appearing in a quantum computer that performs this algorithm. As a quantum computer, we consider the index 
register of L qubits, and thus Eq. itTUI) is clearly satisfied. 

Suppose that the equation f(x) — 1 has M solutions x 1: ■ ■ ■ , xm ■ If we put 



1 



VN-M 



1 



M 



E 

X^Xi,--- ,Xm 

E i*>< 



x—xi ,xm 



then the state \ipo) just after the first Hadamard transformation (see Eq. 1|3(J[I below) is represented as 1] 



\ip ) = cos - | a) + sin- 



Here, the angle 9 is given by 



cos - 
2 



N — M 



N 



(12) 
(13) 

(14) 
(15) 



The Grover iteration G — (2\tpo) (ipo\ — 1)0 > where O denotes the oracle operator, performs the rotation by angle 9 in 
the direction \a) — > in the two-dimensional subspace spanned by \a) and \(3). The state \4>k) after k (— 0, 1, 2, ■ • • ) 
iterations is therefore given by 



\ip k ) = G fe |Vo) = cos [ — - — 9 1 |a) + sin 



V 2 



Hence, by repeating the Grover iteration 



R 



arccos y/ M/N 



(16) 



(17) 



times, one can find a solution to the search problem with probability > 1/2. Here, [a] denotes the smallest integer 
among those larger than or equal to a. When M <C N, in particular, we have 9 ~ 2a/ M/N and 



i? : 



7T 

I' 



(18) 



A. When M = 1 

When M = 1, Eqs. and JT3J| reduce to |a) = |Vo> + 0(1 /y/N) = \ipo) + 0(1/2 L / 2 ) and |/3) = respectively 
Since |^o) an d \%i) are product states, we find that p = 1 for \ipo), \a) and |/3). For \ipk), on the other hand, Eq. i|16|) 
gives the expectation value of the l x component of the magnetization' M x = a x (l) as 

(^|M X |^) = cos 2 f _2^0jL + O(l). (19) 

On the other hand, 

(Vfc|M x 2 |V fc ) - cos 2 ( — ^ + OW- (20) 

Equations ljl§j) and (fSOf) yield 



(^(AM,) 2 ^) = j sin 2 ((2fc + 1)0) £ 2 + 0(L). (21) 

We thus find that (if) k \(AM x ) 2 \ip k ) = 0(L 2 ), i.e., p = 2, if 

sin 2 ((2fc+l)(9) = 0(1). (22) 
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In a similar manner, we can also show that (ipk\(AM z ) 2 \ipk) — 0(L 2 ), where M z = for these states. [In 

order to show that p = 2 for \tpk), it is sufficient to find one additive observable which fluctuates macroscopically, as 
seen from the definition J2J).] 

Since 9 ~ 2/yN, condition 1|22|) is satisfied for all k such that 

S < _-±- < 7T - 6, (23) 

where S is an arbitrary small positive constant independent of N. For example, all k's such that [O.li?] < k < \0.9R\ 
satisfy this condition, according to Eq. I]18p. We therefore conclude that most IV'fcVs in the Grover iteration processes 
are entangled macroscopically (i.e., p = 2) when M = 1, whereas p = 1 for the initial and final states. 

Note that the above result explicitly shows that p is well defined for \ipk)'s, although they are not strictly homoge- 
neous in general. We say this fact as '|^fc)'s are effectively homogeneous,' as in Refs. THHEl. 



B. When M = 0(1) 

WhenM = 0(1) and M > 2, we have \a) = |V>o) + 0{1/VN) = \ip Q ) +0{1/2 L / 2 ) and \/3) = [\x 1 ) + - ■ ■ + \x M ))/VM. 
Since |^>o) is a product state, p = 1 for |-0o) and |a). However, unlike the case of M = 1, \(3) can have p = 2. For 
example, suppose that M — 2 and the two solutions are x$ = 1010 • • • 10 and X\ = 0101 •••01. Then, \/3) — 
(|x ) + \xi))/V2 is a state with p = 2 because (/?|(AMf ) 2 |/?) = C(L 2 ), where Mf = £ ; (-l)'o- 2 (0- 

For |i/;fe) with fc > 1, on the other hand, Eqs. 119H - 121I) hold also in this case. Hence, the discussion including 
Eqs. 1221) and (|23|l also holds. Therefore, we conclude that most \tl>k) ' s i> n the Grover iteration processes are entangled 
macroscopically, i.e., p — 2, when M = 0(1), whereas p — 1 for the initial state. For the final state, p depends on 
the nature of the solutions. 



C. When M = O(N) 

The case of M = 0(1) is most important and interesting because condition @ is clearly satisfied. In contrast, the 
cases of large M such as M = 0(^/N) and M = O(N) are uninteresting because condition © is not satisfied. For 
completeness, however, we briefly discuss the case of M = O(N) as an example of such uninteresting cases. 

When M = O(N), Grover's algorithm does not necessarily use macroscopically entangled states. For example, 
suppose that N is a multiple of 8 and all multiples of 8 less than N are solutions. Then, 

y =a z=l 2=1 
■N/8-1 

'jj Yl |l/000> = |--..-000>, (25) 
y=o 

where | — >) = (|0) + \l))/y/2. Hence, all l^fe)^ are product states except for the last three qubits. Since entanglement 
of 0(1) qubits cannot be the macroscopic entanglement, we find that p — 1 for all |^fe)'s. This does not contradicts 
with the conjecture of Sec. IIIII because condition © is not satisfied when M = O(N). 



D. Relevance of macroscopic entanglement to faster computation by Grover's algorithm 

From the results of Secs. lIV Xl and lTVBl we confirm the conjecture of Sec. lIIII for Grover's quantum search algorithm, 
at least for the most important case of M — 0(1). On the other hand, as mentioned in Sec. IIIII the conjecture does 
not claim that all macroscopically entangled states appearing in the computation would be essential to fast quantum 
computation. We now study this point. 

When M = 0(1), we have seen that most |^fe)'s such that inequality l(2"5|) is satisfied are entangled macroscopically 
(i.e., p — 2), whereas the final state \ipR) may or may not be so depending on the number and natures of the solutions. 
This fact suggests the following: The macroscopic entanglement of most |^fc)'s should be relevant to the speedup 
by Grover's algorithm, whereas the macroscopic entanglement of the final state (and states close to the final state) 
should be irrelevant. We argue that this is indeed the case. 
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The irrelevance of any entanglement of the final state is obvious. In fact, to get a solution one performs measurement 
on \ip R ) ~ |/3) = (|xi)+- • - + \x m ))/^/M. Even if the quantum coherence among the states \xi),- ■ ■ ,\xm) are destroyed 
by, say, external noises, the probability distribution of x, and thus the success probability of getting a solution, is 
almost unaffected because the measurement diagonalizes the computational basis, which includes \xi), • • • , \xm)- 

In contrast, if the macroscopic entanglement of one of |^&)'s which satisfy inequality l|23() is destroyed, the success 
probability is significantly reduced. For example, for \ipn/2) with M = 1, we have 

\tf> n/a ) ~ -j=\a) + ^=\/3) ~ -^o) + ^=\xi), (26) 

which is entangled macroscopically because \ipo) = \ — >—>■ ■ ■ ■ — ►) and |xi) are macroscopically distinct from each 
other. If the quantum coherence between \ipo) and \xi) are destroyed in \ipR/2), the state turns into the mixed state, 

P R /2-l\i>o){M + \\xi){xi\- (27) 
If one applies the Grover iterations another R/2 times, this state evolves into 

f>R - \\i>R/2)^R/2\ + \g R / 2 \ X1 )( X1 \& R / 2 . (28) 

When one performs measurement diagonalizing the computational basis on this degraded final state, the probability 
of getting the correct result x = x\ is quite small because G R / 2 \x\) is much different from \x\). Therefore, the macro- 
scopic entanglement of \ij)R/2), i-e., the quantum coherence between |?/>o) and \x\), is crucial to faster computation. 
In a similar manner, we can show that the macroscopic entanglement of most |^>k)'s is crucial to faster computation. 



V. NUMERICAL RESULTS FOR GROVER'S QUANTUM SEARCH ALGORITHM 

In the analysis of Sec. II VI we have considered entanglement of = G k \ipo) (k — 0, 1,2, ••• ,R). In actual 
quantum computations, the Grover iteration G is realized as a series of local and pair- wise operations [l|. Hence, 
many intermediate states appear during the steps between \tpk) and \ipk+i)- Although the macroscopic entanglement 
of |^>fc)'s is sufficient for confirming our conjecture, we now study entanglement not only of |^fc)'s but also of such 
intermediate states in order to see details of evolution of entanglement. For this purpose, we numerically simulate a 
quantum computer that performs Grover's quantum search algorithm. As in the previous section, we consider the 
index register of L qubits as a quantum computer, and thus Eq. I|1(J|I is clearly satisfied. 



A. Formulation of simulation 



We simulate the case of M = 1 because this case is most fundamental in the search problem. The solution x\ is 
chosen randomly. We have confirmed that this random choice of a solution makes no significant differences on the 
results of the numerical simulations presented below. 

As the initial state, a register 1Z composed of L qubits is set to be the following product state; 

|?/<init) = |0). (29) 

Firstly, the Hadamard transformation is performed by successive applications of the Hadamard gate on individual 
qubits in 1Z, and the quantum state evolves into 

1^0) = "yp E ( 3 °) 

Then we apply the Grover iteration G — (2|V>o) (V'ol — 1)0, which consists of two Hadamard transformations, an oracle 
operation O, and a conditional phase shift P, which works as 



P|0) = |0), 

P\x) = -\x) (x > 0). 



(31) 
(32) 
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Each Hadamard transformation requires L operations of the Hadamard gate. The oracle O is constructed depending 
on the function /(•), and requires its own workspace qubits and computational steps. However, since the oracle is not 
a proper part of the Grover's algorithm, we simulate the operation of O as a one-step operation, and its workspace 
is not included in the simulation. The execution of the conditional phase shift P requires O(L) pairwise unitary 
operations. For simplicity, we simulate P as a one-step operation. As a result, each Grover iteration is simulated by 
2L + 2 steps of operations. After the applications of the Grover iterations R times, the state evolves to 

G R \i> ) = \M - \xi). (33) 

Finally, by performing a measurement on 1Z, one can obtain the solution X\ with a sufficiently high probability. We 
do not simulate this measurement process. The total computational steps Q{L) in our simulation is thus 

Q(L) = L + (2L + 2)R = 0(lV2 i: ). (34) 
B. Results of simulation 

Figure[Dplots e max along the steps of Grover's algorithm, for L = 8, 9, 10, 12, 14 when x\ — 19, 388, 799, 1332, 9875, 
respectively. Figure[21is a magnification from the 1st to 40th steps for L = 8, whereas a magnification from the 1005th 
to 1155th steps for L — 14 is shown in Fig. [31 

8 qubits 

9 qubits 
10 qubits 
12 qubits -— " 
14 qubits 



"0 500 1000 1500 2000 2500 3000 

Step of the algorithm 

FIG. 1: The maximum eigenvalue e max of the VCM of quantum states appearing in Grover's quantum search algorithm for 
L — 8,9, 10, 12, 14 when x\ — 19, 388, 799, 1332, 9875, respectively, as functions of the step of the algorithm. The horizontal 
line represents the value of e m ax for product states, e max = 2.00. 

It is seen that e ma x = 2.00 for all states from |^init) to \tpo), i.e., during the initial Hadamard transformation, which 
is denoted as 'HT' from the 1st to 8th steps in Fig. [21 This is because all these states are product states, for which we 
can easily show that e max = 2 (Appendix . When the stage of Grover iterations begins, e max grows gradually, as 
seen from Figs.n an d[21 I n each Grover iteration, Figs. [21 and [31 show that e max changes when O is operated, whereas 
it is kept constant during the subsequent Hadamard transformation. Then, it changes again when P is operated, 
whereas it is kept constant again during the subsequent Hadamard transformation. As the Grover iterations are 
repeated, e max continues to increase as a whole, until it takes the maximum value after about R/2 times applications 
of G. Further applications of G reduce e max , as seen from Fig.^ toward e max ~ 2.00 for \ipR), which is approximately 
a product state as seen from Eq. (|3*5)l . 

To determine p, we note that e max 's are of the same order of magnitude for all states from \tpk) to (V'fe+i) f° r each 
L, as seen from Figs. [21 and [3 Hence, they have the same value of p as \ipk)- Therefore, from the result of the 
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FIG. 2: A magnification of Fig.0 from the 1st to 40th steps for L = 8. 'HT' represents the Hadamard transformation, whereas 
O and P represent the oracle operation and conditional phase shift, respectively, in a single Grover iteration G. 
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FIG. 3: A magnification of Fig.^ from the 1005th to 1155th steps for L = 14. 'HT' represents the Hadamard transformation, 
whereas O and P represent the oracle operation and conditional phase shift, respectively, in a single Grover iteration G. 



previous section, we conclude that all states from \ipk) to \if>k+i) have p = 2 for all k which satisfies inequality 
As a demonstration, we plot e max 's of \ip\R/2]}i IV'T-R/sl) an( ^ \' l l ) \R/£\) m Fig-E]as functions of L. Since e max 's are all 
proportional to L, we can confirm that p = 2, i.e., these states are entangled macroscopically. Note that Fig. 01 also 
demonstrates again that p is well defined, although the states are not strictly homogeneous. 
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guides to the eyes, whereas the horizontal line represents the value of e max for product states, e max = 
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C. Summary of analyses of Grover's quantum search algorithm 

The results of Sees. IIVI and [V] for Grover's quantum search algorithm, which is a representative algorithm for 
unstructured problems, are summarized as follows. 

When the number of solutions M — 0(1), the search problem is hard in the sense that classical algorithms take 
O(N) steps. This case is most important and interesting because condition 10 is clearly satisfied. In this case, we 
have shown that most {ipk}^ in Grover's algorithm are entangled macroscopically (p = 2), and thus the conjecture of 
Sec. 11111 is confirmed. 

We have also found that the final state \iJjr} may or may not be so depending on the number and natures of the 
solutions. The conjecture does not claim that all macroscopically entangled states appearing the computation would 
be relevant to fast quantum computation. We have shown that the macroscopic entanglement of most Itpk)^ is crucial 
to faster computation, whereas that of the final state is irrelevant. 

The cases of large M such as M = 0(V~N) and M — O(N) are uninteresting in view of quantum computation 
because condition © is not satisfied. For completeness, we briefly discuss the case of M — <D(N) as an example of 
such uninteresting cases, and have shown that Grover's algorithm does not necessarily use macroscopically entangled 
states. 



.1] 



VI. ANALYSIS OF SHOR'S FACTORING ALGORITHM 

In this section, we study Shor's factoring algorithm [Tfillr^|. as a representative algorithm for structured problems 



A. Formulation of simulation 

Let N be a positive integer to be factored, x a random number co-prime to N which satisfies < x < N, and r the 
'order,' i.e., the least positive integer which satisfies x r = 1 (mod N). For a given pair of N and x, one can find the 
value of r efficiently using Shor's algorithm. The first and second registers are denoted by 1Z\ and 7?-2, respectively, 
which have L and L' qubits. We take j^ll 



log 2 N < L' < log 2 N + 1, L = 2L'. 



(35) 
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We assume that this model satisfies Eq. (I10f) . Note, however, that even if IZ2 could be replaced with a shorter 
register, the main result of this section would not change because, as shown below, only the qubits of 1Z\ are entangled 
macroscopically. 

The initial state IV'init) is the product of two product states |0)W and ll)^ of 1Z\ and 7?-2, respectively. We denote 
by IV'ht), IV'me), an d IV'dft) the states just after the Hadamard transformation, modular exponentiation (ME), 
and discrete Fourier transformation (DFT), respectively. For the DFT, we employ the quantum circuit of Sec. V of 
Ref. ^tJj which costs L(L + l)/2 steps. The final states is IV'dft)- 

As in Ref. Q, we represent the process It/'ht) — > IV'me) simply as the product of L controlled unitary transformations, 
because IZi takes a major role Q. As a result, the states appearing during the modular exponentiation in our 
simulations correspond to L representative states out of 0(L 3 ) states. As a result of this simplification, the total 
number Q(L) of computational steps in our simulation becomes 

Q(L) = 2L + ^^±^, (36) 

which is smaller than 0(L 3 ) steps of a real computation. To find the macroscopic entanglement, we shall evaluate 
e mm of the states that appear during the computation, as a function of L to t = L + L' = 3L/2. [Since L to t = O(L), 
we will obtain the same results for p if we evaluate e max as a function of L.j 



B. Results of the simulation 



Figure plots the maximum eigenvalue e max of the VCM along the steps of the algorithm, when N = 21, L to t = 
15, x = 2, for which r — 6. It is seen that e max = 2.00 for all states from |^i n it) to the end of the Hadamard 
transformation. This is because all these states are product states, for which e max = 2 ( Appendix [5J|. When the stage 
of the modular exponentiation begins, e max grows, until it becomes 5.00 for |t/>me)- Then, throughout the stage of 
the discrete Fourier transformation, e max keeps large values, slightly changing step by step. 
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FIG. 5: e max of quantum states appearing in Shor's factoring algorithm when N = 21, Ltot = 15, x = 2, for which r — 6, as a 
function of the step of the algorithm. 

For other values of (N, x), and thus for other values of L t ot according to Eq. we find that e max behaves similarly 
if (N, x) gives r = 6. For example, Fig.0plots e max when N = 104, x = 55, for which r — 6 again, and L to t = 21. It is 
seen that e max behaves similarly to the case of Fig.0 Therefore, as in Ref. 3, we study the dependence of e max on 
L tot by varying (N,x) under the condition that it gives the same value of the order r, r = 6. In this case, the states in 
Shor's algorithm become effectively homogeneous for which p is well defined, as shown in Ref. and in the following. 
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FIG. 6: e max of quantum states appearing in Shor's factoring algorithm when N = 104, L to t = 21, x = 55, for which r — 6, as 
a function of the step of the algorithm. 



Figure d plots the Ltot dependence of e max that is calculated in this way for three representative states including 
IV'me), the state at the j (j + l)-th step of the DFT stage (i.e, just after the pair-wise unitary transformations 
targeting L/2 qubits of 1Z± are finished), and the final state |i/'dft)- For each state, e max increases linearly with 
increasing L to t- Therefore, p = 2 for these states. In a similar manner, we find that all states after the modular 
exponentiation have p — 2 for r — 6, i.e., they are macroscopically entangled. We have also obtained the same 
conclusion for other values of r ranging from 2 to 20, except when r becomes an integral power of 2 (i.e., r = 2, 4, 8, 16), 
for which we find that states with p = 2 are not necessarily used. 

Note that we already found in the previous work £| that the two states, IV'me) and IV'dft), are macroscopically 
entangled by studying specific additive operators. In the present work, in contrast, we have proved the macroscopic 
entanglement of all states after the modular exponentiation, by surveying all possible additive operators by the VCM 
method. This demonstrates the power of the VCM method. 

Another advantage of the VCM method is that one can identify the maximally-fluctuating additive operator(s) 
from the eigenvector(s) corresponding to e max . For example, IV'me) for r — 6 have two degenerate eigenvectors 
corresponding to e max , from which we find that the following two operators are the maximally- fluctuating additive 
operators: 

i max = wf £(-i)^(0, (37) 

1=2 
1=2 

For other values of r, other operators become the maximally-fluctuating additive operators. In particular, the absence 
of operators of / = 1 in Eqs. (|37J) and Ij38(l are accidental, i.e., such operators are included in the sums of the 
maximally- fluctuating additive operators for other values of r. Note that ^4 max and A' ms ^ do not contain operators of 
the second register 1Z.2- This fact shows that the first register TZi are entangled macroscopically, whereas Ti-2 is not, 
in consistency with the result of Ref. Q . 
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FIG. 7: e max of IV'mb} (diamonds), the state at the -j (If- 
(crosses), for r = 6, as functions of L% t — L + L' = 3L/2. 
e max = 2.00. 



+ l)-th step of the DFT stage (squares), and the final state |V>dft) 
The horizontal line represents the value of e ma x for product states, 



C. Simulation with measurement after the modular exponentiation 



In the above simulations of Shor's algorithm, measurement is not performed during the quantum computation. In 
the original paper by Shor 0], on the other hand, measurement diagonalizing the computational basis is performed 
on IZ2 when the stage of the modular exponentiation is finished We also simulate this case. 

Figure |H| plots e max under the same condition as Fig. [S] except that the measurement is performed at the end of the 
modular exponentiation. By the measurement, the state of IZ2 is determined to be one of the states |x a mod N)( 2 ) 
where a = 1, 2, • • • , r. Therefore, e max can take r different profiles after the measurement. Only two different profiles 
°f e max appear in Fig. |S] because those for a — 1,2,3,4 happen to be identical and those for a = 5, 6 happen to be 
identical. Both profiles of e max are quite similar to the profile of Fig. |SJ Therefore, the measurement on 7?-2 at the 
end of the modular exponentiation does not suppress the macroscopic entanglement. 



D. Relevance of macroscopic entanglement to faster computation by Shor's algorithm 

We have found that in Shor's factoring algorithm all states after the modular exponentiation are macroscopically 
entangled for almost all nontrivial values of (N, x), i.e., except for the special case where their values are such that 
the order r becomes an integral power of 2. [This exceptional case will be discussed again in Sec. IVIII ] This again 
supports the conjecture of Sec. IIIII 

However, as in the Grover's algorithm, this does not mean that all of such states could be relevant to the faster 
computation. In fact, we already showed in Ref. £| that the macroscopic entanglement of the final state I^dft) is 
irrelevant to the faster computation, whereas that of IV'me) is crucial. This crucial macroscopic entanglement of IV'me) 
does not disappear even if measurement is performed on the second register just after the modular exponentiation is 
finished. Therefore, as in the Grover's algorithm, macroscopic entanglement plays an essential role in Shor's factoring 
algorithm. 



VII. DISCUSSIONS AND CONCLUSIONS 



We have investigated macroscopic entanglement of quantum states in quantum computers that perform Grover's 
quantum search algorithm and Shor's factoring algorithm. Here, we say a state is entangled macroscopically iff it has 
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FIG. 8: e max of quantum states appearing in Shor's factoring algorithm with measurement of the second register at the end of 
the modular exponentiation, when N = 21, L to t = 15, x = 2, for which r = 6, as a function of the step of the algorithm. After 
the measurement, denoted by the asterisk, two different profiles of e max appear depending on the outcome of the measurement. 

superposition of macroscopically states. As a well-defined index of macroscopic entanglement, we have emp loyed the 
index p that was proposed and studied in Refs. 0, ITTl Il2l Il3j . Using the method developed in Ref. |12|. we have 
calculated this index as a function of the step of each algorithm. 

For both algorithms, we have found that whether macroscopically entangled states are used or not depends on the 
numbers and properties of the solutions to the problem to be solved. When the solutions are such that the problem 
becomes hard in the sense that classical algorithms take more than polynomial steps to find a solution, macroscopically 
entangled states are always used in Grover's algorithm and used almost always (i.e., except when the order r is an 
integral power of 2) in Shor's algorithm. 

Since Grover's and Shor's algorithms are representative ones for unstructured and structured problems, respectively, 
our results support strongly the conjecture (see Sec. IHIf) that quantum computers should utilize macroscopically 
entangled states that is defined by p in some stages of the computation when they solve hard problems much faster 
than any classical algorithms. 

Note that there are many different states with p — 2 in many-qubit systems. Which ones are used depends on the 
quantum algorithms and the inputs. Note in particular that this conjecture does not claim that all states with p = 2 
would be useful in quantum computation. Furthermore, among states with p = 2 that do appear during quantum 
computation, some can be irrelevant to efficient computation, as discussed in Sees. IIV Dl and IVI Dl and in Ref. Q. 

It is interesting to take the contraposition of the conjecture, i.e., if macroscopically entangled states are not used 
throughout a quantum algorithm which satisfies Eq. \lu)) then there must exist a classical algorithm that can solve 
the problem as efficiently as the quantum algorithm, i.e., inequality 0) is not satisfied. This may be used to explore 
classical algorithms with the help of knowledge about quantum algorithms. For example, we have found that Shor's 
factoring algorithm does not necessarily use macroscopically entangled states in the exceptional case where the order 
r is an integral power of 2. According to the above contraposition, this suggests that there would exist a classical 
algorithm that efficiently solve the problem in this special case. 
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APPENDIX A: RANGE OF p 

The range of p is 1 < p < 2. For a system composed of L qubits, this can easily be shown as follows plf. Let 
- ■ ■ be the eigenvalues of the variance-covariance matrix V , Eq. which is a 3L x 3L non-negative hermitian 
matrix. Since £ a (V>(£)|(Ao^(0) 2 |^(£)) = 0(1) for every \ip(L)) and I, we find 

3Le max (i)>^e J = Try = ^^(^(i)|(A ( 7 Q (/)) 2 |V(i)) =0(L). (Al) 

Therefore, according to Eq. Q, p > 1. On the other hand, p < 2 because 

(^(£)|AitA%(£))| <EEKV'(i)|cra^«(0cj'a'A^(OI^(i))| < G(i 2 )- (A2) 

1,1' a, a' 

These arguments can be easily generalized to more general systems. 



APPENDIX B: MAXIMUM EIGENVALUE OF THE VCM FOR PRODUCT STATES 



In this appendix, we show that e max = 2 for a pure state \tp) if it is a product state, 



W) = G$\<tn)u 



(Bl) 



;=i 



where \<j>i)i denotes a state of the qubit at site / (= 1, 2, • • • , L). The VCM of such a state becomes a block-diagonal 
matrix 



fV x \ 

v 2 o 

: V* ••• 



V V L ) 

where Vj is a 3 x 3 matrix whose a(3 element (a, /3 = x, y, z) is given by 

= (<t>i\& a (i)&p(i)\<l>t) - (^I^(OI^)^I^(OI^) 



(B2) 



(B3) 
(B4) 



Therefore, e max is given by the maximum one among the maximum eigenvalues of VJ's. By a unitary transformation 
of this 3x3 matrix such that \<pi) becomes an eigenstate of the transformed <J Z {1), we can transform "Vi into 



1 i 

v,= ( -no 





(B5) 



Since the maximum eigenvalue of this matrix is 2, we find that e max = 2. 
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